Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d8fd482c-2d90-3787-ab60-7d39f5859284.roa
File:                     d8fd482c-2d90-3787-ab60-7d39f5859284.roa (raw, json)
Hash identifier:          E9uaw4sEn5r37h6Ih0LEfpMyMwJkUsEp8pHi+rwQxrg=
Subject key identifier:   0E:A4:D7:28:50:35:6F:14:9C:44:ED:93:6D:BA:77:05:A9:0F:D3:DC
Certificate issuer:       /CN=e4bb5ad3-d823-4023-aace-329885f50c4b
Certificate serial:       010D0C9F432858488AE09673B68285D015348A80
Authority key identifier: DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d8fd482c-2d90-3787-ab60-7d39f5859284.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        169.150.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:96:73:b6:82:85:d0:15:34:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4bb5ad3-d823-4023-aace-329885f50c4b
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=8e7c7a04-d636-4b52-8f0d-2853a3a5f608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:23:40:9d:a5:af:ee:ba:0a:15:f1:14:55:d3:
                    19:55:66:78:26:50:d9:92:d5:22:4e:fc:96:cf:04:
                    dd:e2:37:fa:d6:e5:8a:bc:0a:fb:23:6a:57:3e:77:
                    e4:9a:6b:70:51:7c:b0:79:85:94:40:de:66:5b:30:
                    40:c7:4d:d0:1e:50:ee:e1:95:15:f3:7b:10:25:cf:
                    aa:6c:95:f9:16:01:c7:a9:54:f4:09:fe:43:c7:4a:
                    a0:1c:ba:f8:90:1c:91:0b:cf:ac:45:88:ef:2f:ef:
                    a0:61:99:eb:ff:7a:38:c9:70:e7:14:ae:76:62:a0:
                    88:b3:b1:b6:6a:32:8a:79:08:56:c1:d5:81:27:a8:
                    d6:97:22:7e:b8:7e:0d:e0:d5:c4:df:c2:d3:7e:98:
                    13:4a:6a:20:d4:14:e1:8b:71:40:ef:53:e4:6c:1b:
                    cd:d8:95:76:c4:64:ee:94:67:3d:b9:fe:83:8a:03:
                    f9:4b:4b:92:91:d9:fc:8a:76:d5:36:18:68:ae:f7:
                    cc:da:00:40:11:a5:75:de:1f:28:1a:e6:5f:6f:42:
                    24:eb:96:77:b7:31:f2:e6:72:7d:e6:99:1c:2f:51:
                    8b:09:2a:be:09:22:b2:36:64:b1:77:30:51:2f:e5:
                    5b:89:2c:a4:29:1e:86:a5:7e:41:b3:26:e7:42:83:
                    16:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:A4:D7:28:50:35:6F:14:9C:44:ED:93:6D:BA:77:05:A9:0F:D3:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/d8fd482c-2d90-3787-ab60-7d39f5859284.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b/e4bb5ad3-d823-4023-aace-329885f50c4b.crl

            X509v3 Authority Key Identifier:
                keyid:DC:69:AA:B9:66:57:CC:BC:06:0C:8E:4F:6E:DB:01:2B:81:42:7F:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e4bb5ad3-d823-4023-aace-329885f50c4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.150.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:cb:2e:1d:ca:f3:69:ca:34:20:1e:8c:60:57:e0:cf:c9:0e:
         f0:6a:fd:29:ba:cb:0c:eb:26:88:37:26:dc:e8:a9:63:63:d6:
         64:12:22:32:f6:47:c0:66:32:76:18:80:55:3b:d1:a5:9e:a4:
         c6:df:67:31:b5:95:ca:e3:6c:6b:2a:5a:68:41:43:a0:0a:88:
         98:bc:fc:fb:d5:ba:0e:9f:5b:d2:79:d5:6d:95:9a:54:7d:13:
         f1:9a:7c:02:d0:83:c5:bf:3e:5e:0f:7c:fd:13:c1:3b:c5:ef:
         8f:50:c4:ed:4e:04:e3:30:a6:a9:d9:a9:7c:8f:c1:8b:a4:f0:
         9b:52:60:b1:9b:51:09:b7:2f:ff:ec:c3:24:a5:89:a3:f9:b4:
         01:f3:bf:dc:49:cb:33:55:2b:df:ea:d9:19:59:95:65:2e:f9:
         fc:0c:f6:4e:47:f7:21:c1:57:c6:84:b4:94:b3:1b:73:02:ba:
         6b:37:e5:26:8e:4a:86:ad:2e:9a:05:4a:78:08:eb:58:f3:3c:
         34:bd:1e:00:6e:d6:4b:45:3a:5e:13:b5:34:b0:68:a4:3c:db:
         52:b3:ea:03:0c:8a:16:68:a2:73:9f:39:2a:fb:54:2f:0e:41:
         97:91:3b:6c:c7:27:8a:7b:8a:27:fb:e9:d0:53:1c:19:49:c7:
         cd:28:e8:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4JZztoKF0BU0ioAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRiYjVhZDMtZDgyMy00MDIzLWFhY2UtMzI5ODg1ZjUw
YzRiMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
OGU3YzdhMDQtZDYzNi00YjUyLThmMGQtMjg1M2EzYTVmNjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkiNAnaWv7roKFfEUVdMZVWZ4JlDZktUiTvyW
zwTd4jf61uWKvAr7I2pXPnfkmmtwUXyweYWUQN5mWzBAx03QHlDu4ZUV83sQJc+q
bJX5FgHHqVT0Cf5Dx0qgHLr4kByRC8+sRYjvL++gYZnr/3o4yXDnFK52YqCIs7G2
ajKKeQhWwdWBJ6jWlyJ+uH4N4NXE38LTfpgTSmog1BThi3FA71PkbBvN2JV2xGTu
lGc9uf6DigP5S0uSkdn8inbVNhhorvfM2gBAEaV13h8oGuZfb0Ik65Z3tzHy5nJ9
5pkcL1GLCSq+CSKyNmSxdzBRL+VbiSykKR6GpX5BsybnQoMWjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA6k1yhQNW8UnETtk226dwWpD9PcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJi
NWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4ODVmNTBjNGIvZDhmZDQ4MmMtMmQ5MC0z
Nzg3LWFiNjAtN2QzOWY1ODU5Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTRiYjVhZDMtZDgyMy00MDIzLWFh
Y2UtMzI5ODg1ZjUwYzRiL2U0YmI1YWQzLWQ4MjMtNDAyMy1hYWNlLTMyOTg4NWY1
MGM0Yi5jcmwwHwYDVR0jBBgwFoAU3GmquWZXzLwGDI5PbtsBK4FCf7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNGJiNWFkMy1kODIzLTQwMjMtYWFjZS0zMjk4
ODVmNTBjNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqZZoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB/LLh3K82nKNCAejGBX4M/JDvBq/Sm6ywzrJog3JtzoqWNj1mQSIjL2
R8BmMnYYgFU70aWepMbfZzG1lcrjbGsqWmhBQ6AKiJi8/PvVug6fW9J51W2VmlR9
E/GafALQg8W/Pl4PfP0TwTvF749QxO1OBOMwpqnZqXyPwYuk8JtSYLGbUQm3L//s
wySliaP5tAHzv9xJyzNVK9/q2RlZlWUu+fwM9k5H9yHBV8aEtJSzG3MCums35SaO
SoatLpoFSngI61jzPDS9HgBu1ktFOl4TtTSwaKQ821Kz6gMMihZoonOfOSr7VC8O
QZeRO2zHJ4p7iif76dBTHBlJx80o6Fs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:30 2025 by rpki-client